Information System Security Officer

SOSi•Joint Base Pearl Harbor Hickam, HI

9d•Onsite

About The Position

SOSi is seeking a seasoned Information Systems Security Officer to support mission-critical IT operations at Joint Base Pearl Harbor Hickam in Honolulu. The role is part of a team supporting more than 5,000 users across the Pacific theater and contributes to Command and Control strategies. The ISSO owns the Risk Management Framework lifecycle, identifying vulnerabilities and engineering resilient security controls while supporting classified information systems and organizational security requirements. The ISSO assists the Information System Security Manager in maintaining the security program and policies for the assigned area. The role manages system security authorization packages in eMASS, maintains continuous monitoring, coordinates inspections and external interconnection requests, and ensures compliance with security, configuration management, and vulnerability management requirements. The position also contributes to security incident response and provides clear security-related information to stakeholders.

Requirements

Active, in-scope SECRET clearance.
Compliance with DoD 8140 DCWF 722 Intermediate, Information Systems Security Manager.
Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering, or one of the listed certifications: GMON, SecurityX, CCISO, CCSP, CGRC, CISSO, Cloud+, GCSA, GSEC, Security+, or SSCP.
Six years of experience supporting cybersecurity, information assurance, systems engineering, or RMF-related activities.
Thorough understanding of NIST Publication 800-53r5, the Risk Management Framework, Executive Order 14028, and OMB Mandate M-22-09.
Prior experience with eMASS.
Strong communication skills and ability to coordinate tasks across functional groups.

Nice To Haves

Active, in-scope TOP SECRET clearance with SCI eligibility.
Knowledge of NSA's Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS).
Experience in an agile work environment.
Recent experience in system assessment and authorization.
Practical knowledge of JIRA and Confluence.
Experience with compliance tools such as Tenable Nessus and SCAP.
Experience in program policy and process creation and oversight.

Responsibilities

Assist the ISSM in formulating and maintaining an organized information system security program and applicable policies for the assigned area.
Establish and maintain secure computer systems and networks for classified processing, including their administration, maintenance, and security auditing.
Develop and oversee implementation of operational information systems security guidelines and policies.
Manage assigned eMASS packages containing security authorizations for supervised information systems.
Coordinate information system security inspections, tests, and reviews.
Contribute expertise to the team's response to security incidents and protection of organizational assets.
Support the information system patch and vulnerability management program using ACAS.
Review, maintain, and update STIGs quarterly.
Ensure compliance with Configuration Management policies and procedures for authorizing hardware and software on information systems.
Coordinate with external stakeholders on interconnection requests and facilitate their efficient processing and approval.
Maintain current knowledge of system functions, security policies, technical security safeguards, and operational security measures.
Manage, maintain, and execute the information security continuous monitoring plan.
Maintain records of security-related vulnerabilities and POA&Ms, and report serious or unresolved violations to the AO/DAO.
Evaluate system, environment, and operational requirement changes that could affect security authorization.